Apache JSPWiki < 2.11.0.M4 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Apache JSPWiki < 2.11.0.M3 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Apache JSPWiki < 2.11.0.M5 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Apache JSPWiki <= 2.10.5 XSS Vulnerability

Apache JSPWiki is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Apache JSPWiki < 2.11.0 Multiple Vulnerabilities

Apache JSPWiki is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Apache JSPWiki Log4Shell Direct Check (CVE-2021-44228)

Binary data apachejspwikilog4shell.nbin...

Apache JSPWiki Detection (HTTP)

HTTP based detection of Apache JSPWiki. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.147358";...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Version Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apache JSPWiki 2.11.0 Log4j RCE Vulnerability (Log4Shell) - Active Check

Apache JSPWiki is prone to a remote code execution RCE vulnerability in the Apache Log4j library dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Log4Shell HTTP Scanner

Versions of Apache Log4j2 impacted by CVE-2021-44228 which allow JNDI features used in configuration, log messages, and parameters, do not protect against attacker controlled LDAP and other JNDI related endpoints. This module will scan an HTTP end point for the Log4Shell vulnerability by injectin...

GHSA-CFQJ-9G2G-W7Q6 Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to...

Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-40369 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-40369 Source advisory: OSV:GHSA-CFQJ-9G2G-W7Q6...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-40369 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-40369 Source advisory: GHSA-CFQJ-9G2G-W7Q6...

Incorrect Default Permissions in Apache JSPWiki

Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-44140 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-44140 Source advisory: GHSA-8GW6-W5RW-4G5C...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0.m1, <=2.11.0.m8), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0.m7, <=2.11.0.m8) +4 more potentially affected by CVE-2021-44140 via org.apache.jspwiki:jspwiki-main (>=2.11.0.m1, <=2.11.0.m8)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0.m1, =2.11.0.m1, =2.11.0.m7, =2.11.0.m7, =2.11.0.m1, =2.11.0.m4, =2.11.0.m1, =2.11.0.m8 Source cves: CVE-2021-44140 Source advisory: OSV:GHSA-8GW6-W5RW-4G5C...

Privilege Escalation

jspwiki-api is vulnerable to privilege escalation. Unauthorized filed deletions can be performed on logout hosting a JSPWiki instance which allows a remote attacker to send crafted http requests and delete arbitrary files...

Cross-site Scripting (XSS)

org.apache.jspwiki:jspwiki is vulnerable to cross-site scripting XSS attacks. An attacker is able to gain access to sensitive information about the victim via injecting and executing a specifically crafted link parameter through Denounce plugin...

Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2021-92465)

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet, and JSP from the Apache Foundation.A security vulnerability exists in Apache JSPWiki, which stems from a well-designed plugin link call that could trigger an XSS vulnerability in Apache JSPWiki related to Denounce...